156-115.77 Exam Questions

Consider the following Rule Base; What can be concluded in regards to SecureXL Accept Templates?

In an HA cluster, you modify the number of cores given to CoreXL on only one member using cpconfig and then issue a reboot. What is the expected ClusterXL status of this member whe...

Which information CANNOT be displayed by issuing the command cat /proc/cpuinfo?

You find that your open server SecurePlatform system is lagging although you know you have plenty of memory and the complexity of the Rule Base has not changed significantly. You t...

Where would you find CPU information like model, number of cores, vendor and architecture?

From which version can you add Proxy ARP entries through the GAiA portal?

What happens to manual changes in the file $FWDIR/conf/local.arp when adding Proxy ARP entries through the GAiA portal or Clish?

You are running a R77 Security Gateway on SecurePlatform. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What back up...

Your network is experiencing connectivity problems and you want to verify if routing problems are present. You need to disable the firewall process but still allow routing to pass...

Your ARP cache is overflowing negatively impacting users experience on your network. Which command can you issue to increase the ARP cache on the fly? You do not need this to survi...

Your gateway object is currently defined with a max connection count of 25k connections in Smart Dashboard. Which of the following commands would show you the current and peak conn...

Which command will NOT display information related to memory usage?

What does the command fwaccel templates do?

Running the command fw ctl pstat l would return what information?

You have a user-defined SMTP trap configured to send an alert to your mail server, and you also have SmartView Monitor configured to trigger the alert whenever policy is pushed to...

what command other than fw ctl pstat, will display your peak concurrent connections?

You have just configured HA and find that connections are not being synced. When you have a failover, users complain that they are losing their connections. What command could you...

Which of the following is a valid synchronization status as an output to fw ctl pstat?

You are running some diagnostics on your GAIA gateway. You are reviewing the number of fragmented packets; you notice that there are a lot of large and duplicate packets. Which com...

Your company has grown significantly over the past few months. You are seeing that new connections are being dropped but note that the connections table is not full. You suspect th...

Under which scenario would you most likely consider the use of Multi-Queue?

If you need to use a Domain object in the Rule Base, where should this rule be located?

You have a requirement to implement a strict security policy. With this in mind, you must create a stealth rule. How will this impact your packet acceleration?

What will be the outcome if you set the kernel parameters cphwd_nat_templates_enabled and cphwd_nat_templates_support?

You are finding that some users are complaining about slow connection speed. You would like to review a summary of your connections, including which connections are accelerated and...

You want to verify that the majority of your connections are being optimized by SecureXL. What command would you run to establish this information?

What is the difference between "connection establishment acceleration" (templating) and "traffic acceleration"?

What type of connections cannot be templated?

You issue the command fwaccel stat and see the following: What is a possible reason that the "accept templates" is disabled?

PXL is considered to be what type of acceleration?

You are running an inventory process within your corporate environment (R77) and need to find out CPU, memory, disk space, and information regarding the software blades enabled. Wh...

A Rule Base has been improperly configured with a rule which disables templating at the top of the Rule Base. How will this impact traffic acceleration?

You run the command fwaccel conns and notice in the output that all the connections have "F" in the "flags" column, see below: What does this mean?

From a Best Practices perspective, what percentage of your packets should be accelerated?

How does the Check Point Security Administrator enable NAT Templates?

What should you do after editing fwkern.conf to enable NAT templates?

How would you determine the value of 'Maximum concurrent connections' of the NAT Table?

What does "cphwd_nat_templates_enabled=1" do when entered into fwkern.conf?

You are a system administrator and you are working with Support. Support asked you to enable kernel core dumps on the files. You are unsure if this has already been set. You run th...

When a cluster member is completely powered down, how will the other member identify if there is network connectivity?

If the number of Firewall Workers for CoreXL is set higher on one member of a cluster than the other, the cluster will be in what state?

What is one way to check cluster status on two gateways running in HA mode?

Which command displays FireWall internal statistics about memory and traffic?

To check what is currently set in the Firewall kernel debug input the command:

Misha is working on a stand-by firewall and deletes the connections table in error. He finds that now the table is out of sync with the Active member. to get them completely synced...

In a ClusterXL cluster with delayed synchronization, which of the following is not true?

What is the best way to see how a firewall is performing while processing packets in the firewall path, including resource usage?

What is the best way to see how much traffic went through the firewall that was TCP, UDP and ICMP?

Which file holds global Kernel values to survive reboot in a Check Point R77 gateway?

Your customer has a well optimized Rule Base with most traffic accelerated by SecureXL. They are still seeing slow performance. They are using an 8 core machine. They see the follo...